Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
File: 7_vi0INCz7z3p9dOiOvQMeEgItk.mft (raw, json)
Hash identifier: Eoeegk9G850z2udJVcubfAZLosttRYo1seSLTDdH8bs=
Subject key identifier: 7A:6C:B1:02:86:21:76:E3:0B:B0:05:30:08:B5:A6:80:21:42:DD:EB
Authority key identifier: EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
Certificate issuer: /CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Certificate serial: 019D390A4D3C6059EE5A1AD276211825EF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
Manifest number: 0684
Signing time: Sun 29 Mar 2026 10:01:09 +0000
Manifest this update: Sun 29 Mar 2026 10:01:09 +0000
Manifest next update: Mon 30 Mar 2026 10:01:09 +0000
Files and hashes: 1: 7_vi0INCz7z3p9dOiOvQMeEgItk.crl (hash: oZoic0wpGQ6JY8CgVz4GkxzPv4W1KMsfbe6iEDYnuWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:4d:3c:60:59:ee:5a:1a:d2:76:21:18:25:ef:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Validity
Not Before: Mar 29 10:01:09 2026 GMT
Not After : Mar 30 10:01:09 2026 GMT
Subject: CN=7a6cb102862176e30bb0053008b5a6802142ddeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:f2:91:11:9b:2a:9c:b6:d0:1a:41:d9:64:
c3:1e:e8:bd:41:40:3a:35:be:c7:85:f7:da:81:f1:
5c:1e:ae:33:18:9a:e8:92:ba:43:5b:99:87:4b:5b:
36:a5:0f:13:07:58:fa:f0:d5:fb:8a:79:1c:a1:1f:
3b:53:5a:66:82:9f:ff:2e:ce:12:2f:9e:26:1f:75:
dd:61:31:15:3d:6e:c6:7f:88:32:fe:10:dc:d3:4f:
91:b6:f2:e2:23:eb:c1:06:d8:79:99:cc:69:ce:e9:
cb:8b:3f:9b:89:3a:e8:28:17:e3:59:cd:0a:14:6d:
e9:11:01:42:be:9a:7e:a8:fd:1f:df:cc:e9:67:23:
b5:10:51:04:de:be:0e:bd:56:c9:04:a8:06:81:d9:
29:b3:80:2d:03:aa:14:ef:3f:4d:8c:ed:d7:4b:fc:
01:6e:12:d8:22:96:d2:a5:e8:22:44:10:70:e8:92:
eb:be:7e:aa:50:26:f0:6c:e4:a2:d4:19:c0:d3:44:
41:7a:a8:04:3f:d6:1a:4c:b6:85:7e:d0:79:ba:79:
7b:7d:27:d7:82:9b:c7:bb:70:c1:34:ed:8e:6c:56:
8b:9d:33:d1:15:92:1e:f7:8a:ea:8f:5a:83:39:f4:
be:4b:9a:95:3a:7c:8f:93:f8:71:36:c5:23:f3:83:
d6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6C:B1:02:86:21:76:E3:0B:B0:05:30:08:B5:A6:80:21:42:DD:EB
X509v3 Authority Key Identifier:
keyid:EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:58:50:9c:92:19:0e:c8:7e:0e:10:c3:2a:97:c6:5b:23:6b:
eb:ca:b4:9a:df:cd:c3:59:b2:b5:20:19:70:45:19:9f:03:86:
0c:5c:55:17:7b:98:56:72:27:4c:2d:42:b3:89:d9:b1:6d:fe:
de:b1:a1:cb:cb:66:b3:67:c4:fe:bf:63:cb:a2:1e:ad:1c:c4:
dd:7c:6a:93:11:dd:99:9c:94:c8:d7:84:08:3b:db:70:9a:54:
0c:d9:a7:78:fc:b8:99:d3:bc:e2:06:35:54:1b:05:8c:49:da:
69:fa:66:cf:3d:15:2d:13:be:07:78:90:2f:d4:76:8d:57:ab:
83:cc:bd:aa:2e:4e:ea:db:45:b4:eb:bc:4c:bd:2e:9a:03:05:
ff:21:9d:d9:ec:91:b3:8d:11:2d:5b:84:ef:26:8a:96:0e:ff:
be:a2:72:89:a3:fb:34:77:12:f1:da:34:9e:a5:1d:8b:5f:ce:
97:d3:28:d7:80:2d:3e:f4:32:ad:82:75:fe:3d:f5:7d:35:6d:
eb:97:b7:5a:5a:07:31:60:17:d2:37:e4:0e:76:20:bb:f1:20:
85:4f:45:2d:41:ec:68:1d:16:24:e2:1b:c7:6d:6e:86:c8:30:
9d:df:fe:fd:64:5e:26:4d:85:3c:fc:46:9d:78:95:11:60:30:
de:d4:af:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:25 2026 by rpki-client